$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer File: 18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer (raw, json) Hash identifier: B0z4rmM+kiXw4JIihweNrxHQTfLy49ydrdTTCIETMmU= Subject key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6F0193E2C3A8235156B78F71135DF6FCC88AA1F9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft caRepository: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 15:56:42 +0000 Certificate not after: Tue 02 Jun 2026 16:01:42 +0000 Subordinate resources: AS: 267991 IP: 45.167.52.0/22 IP: 192.100.223.0/24 IP: 2804:5654::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 18:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:01:93:e2:c3:a8:23:51:56:b7:8f:71:13:5d:f6:fc:c8:8a:a1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 3 15:56:42 2025 GMT Not After : Jun 2 16:01:42 2026 GMT Subject: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:2b:1b:6c:d7:66:ec:b6:04:c6:2c:45:b2: 43:4b:96:a4:cf:12:88:42:66:9c:20:c4:f4:30:f5: 01:19:f1:a4:54:15:92:89:42:0b:20:5e:46:89:b0: d7:5b:5e:96:78:a0:ef:8a:b4:8c:d3:28:8d:fb:73: ed:6d:d2:1b:d8:03:77:06:d3:05:f1:81:64:29:84: 98:15:a4:ff:91:43:47:e2:50:9c:1a:64:c5:3c:fa: c6:48:3a:cb:69:c3:50:29:01:49:bc:21:7a:74:fe: e6:3e:63:d2:dc:37:d6:84:f9:d8:be:64:12:07:3a: 1c:fb:4c:1b:18:3b:0f:54:88:07:d5:c9:48:21:a6: c5:17:67:28:df:5b:81:9c:a1:9b:67:73:f6:f7:5b: be:68:3c:4a:03:eb:ec:bb:bb:f2:dc:b3:ea:f1:a6: c9:33:38:2c:51:76:65:ad:dd:1a:6f:89:14:e1:71: ee:d7:13:91:04:6d:c0:ed:eb:c8:48:e5:c1:4a:da: 3f:64:de:53:93:bf:4d:b4:e7:98:d5:27:13:6e:a6: f5:f8:8b:33:66:e8:89:de:83:96:29:ff:e2:6f:c3: 24:79:02:78:2a:d6:f9:22:66:84:2f:07:64:03:7b: ec:88:a8:b0:16:97:95:08:ec:ab:68:51:30:36:33: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.52.0/22 192.100.223.0/24 IPv6: 2804:5654::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267991 Signature Algorithm: sha256WithRSAEncryption 1a:9b:4c:d5:11:1c:fd:6a:47:03:59:4f:2c:4b:ff:0a:4b:6a: 80:0a:0f:af:db:c2:b0:94:ac:ed:ef:98:26:6b:f9:b6:8f:cb: 87:48:b9:96:97:80:15:42:ca:76:47:14:e7:41:9e:69:0d:23: 7b:11:91:c9:77:f1:e1:31:d5:a7:44:f3:d8:84:31:f7:93:59: 6c:62:08:ad:f7:41:4b:7e:ed:b1:e4:a3:0f:f5:6e:f0:2e:04: aa:ed:9c:68:33:77:23:7d:cc:3a:b0:5f:6b:eb:e5:e7:05:b7: fd:b7:80:36:73:19:82:b3:b4:b3:64:c9:f2:16:97:cb:a1:01: 41:0a:52:e4:6e:2c:34:7f:cf:1f:23:04:94:bb:ab:cd:a6:e0: b3:8f:f5:44:3f:8b:12:7e:0c:87:f1:9f:02:f3:8e:b6:77:40: c9:37:66:a8:10:59:c5:6b:a2:46:0d:16:85:c5:92:eb:39:d7: f6:f0:e0:78:03:9c:87:85:40:01:c6:ab:e1:cf:7e:9a:41:ff: a2:51:69:51:ed:15:bf:80:ee:a4:79:38:3a:65:34:38:76:70: 96:43:dc:e2:69:0d:57:fa:b5:34:36:21:b6:01:43:66:ab:62: 5f:3f:00:d1:7f:97:96:df:39:70:c2:75:3c:d3:48:97:01:87: fc:fb:5e:5a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbwGT4sOoI1FWt49xE132/MiKofkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDMxNTU2NDJaFw0yNjA2MDIxNjAxNDJaMDMxMTAvBgNV BAMTKDE4NDQwRTQ3RUUxQTlGMjUyMTE4MUZCMzVBMjM5NEEwREU5MkNDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HysbbNdm7LYExixFskNLlqTP EohCZpwgxPQw9QEZ8aRUFZKJQgsgXkaJsNdbXpZ4oO+KtIzTKI37c+1t0hvYA3cG 0wXxgWQphJgVpP+RQ0fiUJwaZMU8+sZIOstpw1ApAUm8IXp0/uY+Y9LcN9aE+di+ ZBIHOhz7TBsYOw9UiAfVyUghpsUXZyjfW4GcoZtnc/b3W75oPEoD6+y7u/Lcs+rx pskzOCxRdmWt3RpviRThce7XE5EEbcDt68hI5cFK2j9k3lOTv02055jVJxNupvX4 izNm6Ineg5Yp/+JvwyR5Angq1vkiZoQvB2QDe+yIqLAWl5UI7KtoUTA2Mz/1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYRA5H7hqfJSEY H7NaI5Sg3pLMfDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDhU VVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5Mk4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q4 VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAvMTg0 NDBFNDdFRTFBOUYyNTIxMTgxRkIzNUEyMzk0QTBERTkyQ0M3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLac0AwQAwGTfMA0EAgACMAcDBQAoBFZUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQW1zANBgkqhkiG9w0BAQsFAAOCAQEAGptM1REc /WpHA1lPLEv/CktqgAoPr9vCsJSs7e+YJmv5to/Lh0i5lpeAFULKdkcU50GeaQ0j exGRyXfx4THVp0Tz2IQx95NZbGIIrfdBS37tseSjD/Vu8C4Equ2caDN3I33MOrBf a+vl5wW3/beANnMZgrO0s2TJ8haXy6EBQQpS5G4sNH/PHyMElLurzabgs4/1RD+L En4Mh/GfAvOOtndAyTdmqBBZxWuiRg0WhcWS6znX9vDgeAOch4VAAcar4c9+mkH/ olFpUe0Vv4DupHk4OmU0OHZwlkPc4mkNV/q1NDYhtgFDZqtiXz8A0X+Xlt85cMJ1 PNNIlwGH/PteWg== -----END CERTIFICATE-----Generated at Tue Jul 1 17:59:00 2025 by rpki-client